Puppet基础篇8-编写第二个完整测试模块yum 推荐

Puppet基础篇8-编写第二个完整测试模块yum

零基础学习Puppet自动化配置管理系列文档

工欲善其事必先利其器

上一节讲解了puppet基础环境模块puppet，除此之外影响puppet基础环境的还有一个模块叫yum源，当然这个是相对于RedHat系统而言的，如果是SLES系统，就要配置zypper源了，其它Linux系统也是如此。那么配置yum源需要用到哪些资源呢？之前写puppet模块的时候用到了file资源、service资源、package资源，那么这三个资源是否能满足yum模块的配置呢，答案是肯定的。然而官方给出了专用的yumrepo资源，管理可以精确到repo里面的每一行，使用还是非常方便的，接下来，我们使用官方给出的yumrepo资源来配置yum模块。注：上一节教会大家如何一步步创建一个完整模块，为了避免重复，这一节就直接贴配置了。

一、配置之前需要考虑的问题：

1、yum包需要被安装；2、yum主配置文件yum.conf需要配置正确；3、每台主机至少有两个repo源，一个指向本地的ISO源，一个指向自定义的puppet源；4、不同系统版本的repo源中的部分参数略有不同，比如baseurl。

二、创建yum模块

1、创建yum模块目录结构

[root@puppetmaster modules]# tree yum
yum
├── files
├── manifests
└── templates
3 directories, 0 files

2、创建package资源

[root@puppetmaster manifests]# vim install.pp
class yum::install{
package { 'yum':
ensure => installed, #要求yum这个包处于安装状态
}
}

3、创建params.pp根据操作系统版本定义repo文件中的各项条目

eg.
[root@agent1 ~]# facter | grep operatingsystemrelease   系统版本fact
operatingsystemrelease => 5.7

由于RedHat存在多个版本，不同版本yum源的指向不同，对应的pki认证文件也不同，因此应当设置一些变量，然后进行引用。以下只定义了系统版本为5.7、5.8、和6.4的变量，如果有其它版本效仿即可。

[root@puppetmaster manifests]# vim params.pp
class yum::params {
case $operatingsystemrelease{
5.7: {
$yum_redhat_descr = 'rhel base rpm packages'  #定义redhat光盘源的描述信息
$yum_puppet_descr = 'puppet rpm packages for rhel' #定义puppet源的描述信息
$yum_redhat_pki = 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5' #定义redhat光盘源的pki认证文件位置
$yum_redhat_baseurl = 'file:///media/cdrom/Server'  #定义redhat光盘源baseurl的下载位置
$yum_puppet_baseurl = 'ftp://puppetmaster.kisspuppet.com/RHEL5U7' #定义puppet源baseurl的下载位置
$yum_redhat_pki_name = '/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5' #定义puppet源pki认证文件位置
$yum_redhat_pki_download = 'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel5' #定义pki文件的服务器下载地址
}
5.8: {
$yum_redhat_descr = 'rhel base rpm packages'
$yum_puppet_descr = 'puppet rpm packages for rhel'
$yum_redhat_pki = 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
$yum_redhat_baseurl = 'file:///media/cdrom/Server'
$yum_puppet_baseurl = 'ftp://puppetmaster.kisspuppet.com/RHEL5U8'
$yum_redhat_pki_name = '/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
$yum_redhat_pki_download = 'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel5'
}
6.4: {
$yum_redhat_descr = 'rhel base rpm packages'
$yum_puppet_descr = 'puppet rpm packages for rhel'
$yum_redhat_pki = 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel6'
$yum_redhat_baseurl = 'file:///media/cdrom'
$yum_puppet_baseurl = 'ftp://puppetmaster.kisspuppet.com/RHEL6U4'
$yum_redhat_pki_name = '/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel6'
$yum_redhat_pki_download = 'puppet:///modules/yum/PM-GPG-KEY/RPM-GPG-KEY-redhat-release-rhel6'
}
default: {  #定义如果没有以上版本的系统，直接报以下错误，同时也是为了方便调试
fail("Module yum is not supported on ${::operatingsystem}")
}
}
}

4、创建config.pp文件config.pp文件用于管理yum主配置文件yum.conf，repo文件的属性，pki文件的属性及下载地址和yumrepo源

[root@puppetmaster manifests]# vim config.pp
class yum::config{
include yum::params  #引用class yum::params
include yum::config_file,yum::config_key,yum::config_repo
}
class yum::config_file{
file { '/etc/yum.conf':  #创建file资源管理yum主配置文件yum.conf
ensure  => present, #要求文件处于存在状态
owner   => 'root',  #属主为root
group   => 'root',  #属组为root
mode    => '0644',  #文件权限为644
source  => 'puppet:///modules/yum/etc/yum.conf', #要求从puppetmaster服务器指定目录去下载
require => Class['yum::install'], #要求在配置之前先安装yum软件包
}
file { '/etc/yum.repos.d/rhel-base.repo':  #设置光盘repo的一些属性
ensure  => present,
owner   => 'root',
group   => 'root',
mode    => '0644',
require => Class['yum::config_repo'], #要求设置之前yumrepo资源rhel-base必须存在
}
file { '/etc/yum.repos.d/rhel-puppet.repo':  #设置puppet repo的一些属性
ensure  => present,
owner   => 'root',
group   => 'root',
mode    => '0644',
require => Class['yum::config_repo'],  #要求设置之前yumrepo资源puppet必须存在
}
}
class yum::config_key{  #设置pki证书的一些属性及下载位置
file { $yum::params::yum_redhat_pki_name:
ensure => present,
owner  => 'root',
group  => 'root',
mode   => '0644',
source => $yum::params::yum_redhat_pki_download,
}
}
class yum::config_repo{
yumrepo { rhel-base: #创建yumrepo资源rhel-base
descr    => $yum::params::yum_redhat_descr, #设置描述信息
baseurl  => $yum::params::yum_redhat_baseurl, #设置yum源下载地址
enabled  => 1, #激活yum源
gpgcheck => 1, #设置要求通过pki校验
gpgkey   => $yum::params::yum_redhat_pki, #设置pki文件的下载位置
require  => Class['yum::config_key'], #要求这个文件必须存在
priority => 1, #设置repo的优先级为1(数字越小优先级越高)
}
yumrepo { rhel-puppet:
descr    => $yum::params::yum_puppet_descr,
baseurl  => $yum::params::yum_puppet_baseurl,
enabled  => 1,
gpgcheck => 0,
priority => 2,
}
}

5、创建init.pp文件由于params.pp文件中设置的变量名称引用太长，这里可以在init.pp中将变量名简化，方便引用。

class yum(
$yum_redhat_descr        = $yum::params::yum_redhat_descr, #
$yum_puppet_descr        = $yum::params::yum_puppet_descr,
$yum_redhat_pki          = $yum::params::yum_redhat_pki,
$yum_redhat_baseurl      = $yum::params::yum_redhat_baseurl,
$yum_puppet_baseurl      = $yum::params::yum_puppet_baseurl,
$yum_redhat_pki_name     = $yum::params::yum_redhat_pki_name,
$yum_redhat_pki_download = $yum::params::yum_redhat_pki_download
) inherits yum::params {   #设置这些变量依赖于yum::params类
include yum::config,yum::install  #包含所有子class
}

因此、上面定义的class yum::config_key和yum::config_repo可以写成以下格式

class yum::config_key{  #设置pki证书的一些属性及下载位置
file { $yum_redhat_pki_name:
ensure => present,
owner  => 'root',
group  => 'root',
mode   => '0644',
source => $yum_redhat_pki_download,
}
}
class yum::config_repo{
yumrepo { rhel-base: #创建yumrepo资源rhel-base
descr    => $yum_redhat_descr, #设置描述信息
baseurl  => $yum_redhat_baseurl, #设置yum源下载地址
enabled  => 1, #激活yum源
gpgcheck => 1, #设置要求通过pki校验
gpgkey   => $yum_redhat_pki, #设置pki文件的下载位置
require  => Class['yum::config_key'], #要求这个文件必须存在
priority => 1, #设置repo的优先级为1(数字越小优先级越高)
}
yumrepo { rhel-puppet:
descr    => $yum_puppet_descr,
baseurl  => $yum_puppet_baseurl,
enabled  => 1,
gpgcheck => 0,
priority => 2,
}
}

6、创建puppet.conf和pki文件

[root@puppetmaster yum]# tree files
files
├── etc
│   └── yum.conf  #可以从节点/etc/目录下copy一个yum.conf文件进行配置管理
└── PM-GPG-KEY
├── RPM-GPG-KEY-puppet-release  #自己做一个pki文件，如何做，请google
├── RPM-GPG-KEY-redhat-release-rhel5  #在RHEL5系统/etc/pki/rpm-gpg/目录下面有对应的pki文件，将其命个别名即可
└── RPM-GPG-KEY-redhat-release-rhel6  #在RHEL6系统/etc/pki/rpm-gpg/目录下面有对应的pki文件，将其命个别名即可
2 directories, 4 files

7、应用到节点上

[root@puppetmaster modules]# vim /etc/puppet/manifests/site.pp
$puppetmaster = 'puppetmaster.kisspuppet.com'
class environments{
include motd,puppet,yum
}
node default{
include environments
}

8、在agent1上进行测试

[root@agent1 yum.repos.d]# mv * /tmp/  #将所有的repo文件移动到/tmp目录下
[root@agent1 yum.repos.d]# puppet agent -t #运行一次puppet更新动作，可以通过以下日志看出更新
info: Caching catalog for agent1_cert.kisspuppet.com
info: Applying configuration version '1395696487'
info: create new repo rhel-puppet in file /etc/yum.repos.d/rhel-puppet.repo
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/descr: descr changed '' to 'puppet rpm packages for rhel'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/baseurl: baseurl changed '' to 'ftp://puppetmaster.kisspuppet.com/RHEL5U7'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/enabled: enabled changed '' to '1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/gpgcheck: gpgcheck changed '' to '0'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-puppet]/priority: priority changed '' to '2'
info: changing mode of /etc/yum.repos.d/rhel-puppet.repo from 600 to 644
info: create new repo rhel-base in file /etc/yum.repos.d/rhel-base.repo
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/descr: descr changed '' to 'rhel base rpm packages'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/baseurl: baseurl changed '' to 'file:///media/cdrom/Server'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/enabled: enabled changed '' to '1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/gpgcheck: gpgcheck changed '' to '1'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/gpgkey: gpgkey changed '' to 'file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5'
notice: /Stage[main]/Yum::Config_repo/Yumrepo[rhel-base]/priority: priority changed '' to '1'
info: changing mode of /etc/yum.repos.d/rhel-base.repo from 600 to 644
notice: Finished catalog run in 0.51 seconds
[root@agent1 yum.repos.d]# ls
rhel-base.repo  rhel-puppet.repo
[root@agent1 yum.repos.d]# cat rhel-base.repo  #查看更新的光盘源文件
[rhel-base]
name=rhel base rpm packages
baseurl=file:///media/cdrom/Server
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release-rhel5
priority=1
[root@agent1 yum.repos.d]# cat rhel-puppet.repo #插件更新的puppet源文件
[rhel-puppet]
name=puppet rpm packages for rhel
baseurl=ftp://puppetmaster.kisspuppet.com/RHEL5U7
enabled=1
gpgcheck=0
priority=2

说明：关于puppet的资源目前大概有48种，这里就不一一介绍了，详情可访问http://docs.puppetlabs.com/references/stable/type.html

返回主目录

交流方式：

微信公众号：puppet2014，可微信搜索加入，也可以扫描以下二维码进行加入

微信公众号QQ交流群：296934942

Puppet_Learningpuppet基础知识, puppet学习, puppet资料, puppet模块